CN115657639A

CN115657639A - System, method, device and storage medium for monitoring functions of vehicle-mounted chip

Info

Publication number: CN115657639A
Application number: CN202211321549.1A
Authority: CN
Inventors: 请求不公布姓名
Original assignee: Cambrian Jixingge Nanjing Technology Co ltd
Current assignee: Cambrian Jixingge Nanjing Technology Co ltd
Priority date: 2022-10-26
Filing date: 2022-10-26
Publication date: 2023-01-31

Abstract

The present disclosure discloses a system, method, apparatus, and storage medium for monitoring on-board chip functions. According to the system disclosed by the embodiment of the disclosure, the control unit is used for registering the diagnosis service unit, and the diagnosis service unit with the corresponding diagnosis function is controlled to perform diagnosis test according to the type of the function to be tested in the vehicle-mounted chip, so that dynamic registration of different diagnosis service units can be realized according to user requirements or actual conditions, and the expandability of diagnosis test service is favorably improved.

Description

System, method, device and storage medium for monitoring functions of vehicle-mounted chip

Technical Field

The present disclosure relates generally to the field of on-board chip technology. More particularly, the present disclosure relates to a system, method, apparatus, and storage medium for monitoring on-board chip functions.

Background

With the development of the traditional automobile towards intellectualization, electromotion and networking, the vehicle-mounted chip of the automobile also changes the ground cover. Traditional automobiles are more concerned with the dimensions of performance, power, fuel consumption, etc., while smart automobiles are more concerned with the interaction between the automobile and a person. In order to meet the development requirements of intelligent automobiles, a greater number of chips with stronger functions are introduced into the intelligent automobiles.

The traditional vehicle-mounted chip monitoring system tests some functions of the vehicle-mounted chip through fault injection or static signal detection. However, these detection schemes are usually preset, so that there are problems of fixed detection mode, low expansibility and the like, which makes it difficult for the vehicle enterprises to customize according to their own needs or actual application conditions, and thus the development trend of intelligent vehicles cannot be satisfied.

In view of this, a corresponding technical scheme is urgently needed to solve the problem that the expansibility of the vehicle-mounted chip monitoring system is low.

Disclosure of Invention

To address at least one or more of the above-identified technical problems, the present disclosure proposes, in various aspects, a system, method, apparatus, and storage medium for monitoring on-board chip functions.

In a first aspect, the present disclosure provides a system for monitoring on-board chip functionality, comprising: a control unit configured to: registering the diagnosis service unit; controlling a diagnosis service unit with a corresponding diagnosis function to perform diagnosis test according to the type of the function to be tested in the vehicle-mounted chip so as to monitor the function state of the function to be tested; and the diagnosis service unit is configured to perform diagnosis test on the function to be tested in the vehicle-mounted chip under the control of the control unit and return a diagnosis result.

In a second aspect, the present disclosure provides a method for monitoring on-board chip functionality, comprising: registering the diagnosis service unit; and controlling a diagnosis service unit with a corresponding diagnosis function to perform diagnosis test according to the type of the function to be tested in the vehicle-mounted chip so as to monitor the function state of the function to be tested.

In a third aspect, the present disclosure provides an apparatus for monitoring on-board chip functionality, comprising: a processor; and a memory having stored therein program instructions for monitoring on-board chip functions, which when executed by the processor, cause the apparatus to carry out a method according to the disclosure in any one of the second aspects.

In a fourth aspect, the present disclosure provides a computer-readable storage medium in which program instructions for monitoring a vehicle-chip function are stored, which program instructions, when executed by a processor, cause the implementation of the method according to any one of the second aspects of the present disclosure.

By the system and the method for monitoring the functions of the vehicle-mounted chip, the scheme disclosed by the invention can register the diagnosis service unit, so that dynamic registration of different diagnosis service units can be realized according to user requirements or actual conditions, and diagnosis test services with corresponding functions can be provided after the diagnosis service unit is registered, so that a fixed diagnosis detection scheme does not need to be preset, and the expandability of the diagnosis test services is improved. In some embodiments, the policy module is arranged to dynamically configure the security level judgment policy according to the operating state of the vehicle, so that different security level judgment policies can be set in different operating states of the vehicle, and the security level judgment policy can be more suitable for improving the applicability and flexibility.

Drawings

The above and other objects, features and advantages of exemplary embodiments of the present disclosure will become readily apparent from the following detailed description, which proceeds with reference to the accompanying drawings. Several embodiments of the present disclosure are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings and in which like reference numerals refer to similar or corresponding parts and in which:

FIG. 1 shows a schematic block diagram of a system for monitoring on-board chip functions in accordance with an embodiment of the present disclosure;

FIG. 2 shows a schematic block diagram of a system including a policy unit in accordance with an embodiment of the present disclosure;

FIG. 3 shows a schematic block diagram of a system including a configuration unit according to an embodiment of the present disclosure;

FIG. 4 shows a schematic block diagram of a system including a communication unit in accordance with an embodiment of the present disclosure; and

FIG. 5 illustrates a flow chart of a method for monitoring on-board chip functionality in accordance with an embodiment of the disclosure.

Detailed Description

The technical solutions in the embodiments of the present disclosure will be described clearly and completely with reference to the accompanying drawings in the embodiments of the present disclosure, and it is obvious that the described embodiments are some, not all embodiments of the present disclosure. All other embodiments, which can be derived by one skilled in the art from the embodiments disclosed herein without making any creative effort, shall fall within the scope of protection of the present disclosure.

It will be understood that the terms "comprises" and/or "comprising," when used in this specification and claims, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.

It is also to be understood that the terminology used in the description of the disclosure herein is for the purpose of describing particular embodiments only, and is not intended to be limiting of the disclosure. As used in the specification and claims of this disclosure, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should be further understood that the term "and/or" as used in the specification and claims of this disclosure refers to any and all possible combinations of one or more of the associated listed items and includes such combinations.

As used in this specification and claims, the term "if" may be interpreted contextually as "when", "upon" or "in response to a determination" or "in response to a detection". Similarly, the phrase "if it is determined" or "if a [ described condition or event ] is detected" may be interpreted contextually to mean "upon determining" or "in response to determining" or "upon detecting [ described condition or event ]" or "in response to detecting [ described condition or event ]".

Specific embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

FIG. 1 shows a schematic block diagram of a system for monitoring on-board chip functions in accordance with an embodiment of the present disclosure. As shown in fig. 1, the system 100 may include a control unit 110 and a diagnostic service unit 120, wherein the control unit 110 may be configured to: register the diagnostic service unit 120; and controlling the diagnosis service unit 120 with the corresponding diagnosis function to perform the diagnosis test according to the type of the function to be tested in the vehicle-mounted chip so as to monitor the function state of the function to be tested. The diagnosis service unit 120 may be configured to perform a diagnosis test on a function to be tested in the on-board chip under the control of the control unit 110, and return a diagnosis result.

The vehicle-mounted chip is a chip used on an automobile, namely a vehicle-scale chip, and belongs to one type of automobile elements. The automotive specification level is a specification standard suitable for automotive electronic components. In some embodiments, different types of onboard chips are responsible for different functions. For example, an on-board chip responsible for computing power and data processing may have control functions for automotive components such as the engine, chassis, and/or body. The sensing chip has the function of detecting radar, an air bag or tire pressure and the like; for example, the display chip has a display function of displaying a reverse image or a navigation image. By detecting the functional state of the vehicle-mounted chip, the state of the hardware device or the software function related to the vehicle-mounted chip can be monitored.

The function to be tested described herein may include one or more functions (e.g., the control function, the detection function, the display function, etc., described above) for which the on-board chip is responsible, or may include functions related to the on-board chip. The functions associated with the on-board chip may include one or more of, for example, I2C interface, serial peripheral interface (i.e., SPI interface), transmission control protocol/internet protocol (i.e., TCP/IP protocol), register, and network communication functions of the on-board chip. Systems according to embodiments of the present disclosure may be used for function monitoring of one or more onboard chips.

In other embodiments, for different types of functions of the on-board chip, or for different types of on-board chips, the diagnostic service unit 120 capable of providing the corresponding diagnostic function may be provided to provide a targeted diagnostic test service. The diagnosis service unit 120 having the corresponding diagnosis function is a diagnosis service unit having a diagnosis test service for the function to be tested of the corresponding type. For example, when the function to be tested is a function of a register class of the in-vehicle chip, the diagnostic service unit 120, which can be used to detect, for example, a read-write function of the register, may be provided to perform a test service of the read-write function on the register. In still other embodiments, one or more diagnostic service units 120 may be dynamically configured to perform their respective diagnostic test services under the control of the control unit 110 when each diagnostic service unit 120 is registered with the system 100.

In some embodiments, in registering the diagnostic service unit 120, the control unit 110 may be further configured to: in response to receiving the diagnosis registration request of the diagnosis service unit 120, the registration connection with the diagnosis service unit 120 may be realized by calling a registration interface preset on the control unit 110. In other embodiments, the control module 110 may have an active diagnostic function, that is, the diagnostic service unit 120 having a corresponding diagnostic function may be triggered actively to send a diagnostic test instruction, for example, to control the corresponding diagnostic service unit 120 to perform a diagnostic test on the functional status of the on-board chip.

In still other embodiments, the diagnostic test performed by the diagnostic service 120 may be a dynamic test. For example, for the functional diagnosis of the register class, the diagnostic service unit 120 having the corresponding diagnostic function may dynamically write the relevant diagnostic test case and then return the read result to the control unit 110. Also for example, for diagnosis of a pin function of an in-vehicle chip, the diagnostic service unit 120 having a corresponding diagnostic function may perform a test operation on the pin to obtain a functional state of the pin. Such as: if the GPIO pin is used for testing, the pull-up, pull-down and PWM waveforms can be tested. If the test is a pin test of the communication function of the SPI, the receiving and sending of data, the data correctness check and the like can be tested under different rates. In some embodiments, the diagnostic result returned by the diagnostic service unit 120 to the control unit 110 may include information such as a function state, a function parameter, and the like of the function to be tested. Compared with the conventional vehicle-mounted chip monitoring system in which fault injection is performed or only static signals such as temperature are detected, dynamic detection is helpful for truly reflecting the functional state of the function to be detected during operation.

In other embodiments, each diagnostic service unit 120 may include one or more diagnostic test cases, each of which may be used to service diagnostic tests for a sub-function of the on-board chip. For example, it is assumed that a certain diagnostic service unit 120 is used to diagnose the function of the I2C interface, one diagnostic test case included in the diagnostic service unit may be used to diagnose the transmission speed of the I2C interface, and another diagnostic test case may be used to diagnose the connection state of the I2C interface.

In still other embodiments, each diagnostic service unit 120 may have a corresponding one of the service identifications and each diagnostic test case may have a corresponding one of the case identifications. In some application scenarios, the diagnosis of the corresponding function may be performed by calling the diagnosis service unit 120 corresponding to the corresponding service identifier, or the diagnosis of the corresponding sub-function may be performed by calling the diagnosis test case corresponding to the corresponding case identifier. In other application scenarios, when there is a need to upgrade a diagnostic service unit 120, a corresponding single or multiple diagnostic service units 120 may be upgraded independently by identifying a service identification.

In some embodiments, the control unit 110 may have not only a function of triggering active diagnosis, but also a function of triggering passive diagnosis, for example, may receive a diagnosis request from another unit in the system or an external unit outside the system to control the diagnosis service unit 120 to perform a corresponding diagnosis function. In other application scenarios, when a new fault or error information occurs during the operation of the on-board chip, the diagnostic service unit 120 with corresponding detection function may be designed according to the new fault or error information, and the system according to the embodiment of the present disclosure has the capability of monitoring the new fault or error information through registration of the diagnostic service unit 120. According to the arrangement, the problem that some hidden faults cannot be found in time through preset tests in the traditional chip monitoring system can be solved.

The system according to the embodiment of the present disclosure is exemplarily described above with reference to fig. 1, and it can be understood that the system according to the embodiment of the present disclosure can conveniently implement control and personalized setting of a required diagnostic test service through a registration manner when any diagnostic test service needs to be added, which is beneficial to improve flexibility and extensibility of the diagnostic test service. It will also be appreciated that the above description is exemplary and not limiting, for example, in some embodiments, the control unit 110 may be further configured to unregister the diagnostic service unit 120, i.e., to unregister with the diagnostic service unit 120 when a corresponding diagnostic service is not required, thereby facilitating further flexibility in diagnostic test services. For example, a system according to an embodiment of the present disclosure may not be limited to include only the control unit and the diagnostic service unit in the drawings, and in other embodiments, a system according to an embodiment of the present disclosure may further include, for example, a policy unit to provide a corresponding security level judgment policy. This is described in an exemplary manner in connection with fig. 2.

FIG. 2 shows a schematic block diagram of a system including a policy unit in accordance with an embodiment of the present disclosure. As shown in fig. 2, the system 200 may include a control unit 110, a diagnostic service unit 120, and a policy unit 210, wherein the policy unit 210 may be configured to: determining a safety level judgment strategy corresponding to the function to be tested in the running state according to the running state of the vehicle; and judging the diagnosis result according to the safety level judgment strategy so as to determine the safety level of the function state of the function to be detected in the diagnosis result. The control unit 110 may also be configured to perform a corresponding security operation according to the security level.

In some embodiments, the operating state may include a stationary state or a driving state. In other embodiments, the driving state may include a forward driving state or a backward driving state (i.e., a reverse state). In still other embodiments, different security level determination policies may be set at different operating states. In each operating state, a corresponding security level judgment policy can be set for each function to be tested. For example, for the reverse image function, different safety level determination strategies may be set in the stationary state and the driving state of the vehicle.

The policy unit 210 may be configured to import security level judgment policies of different functions to be tested, so as to judge the security level of the function to be tested. The safety level judgment strategy can comprise the corresponding relation between the function state of the vehicle-mounted chip and the safety level. The safety level judgment strategy can be preset according to needs and can also be added in real time according to the actual condition of the vehicle. In some embodiments, the security level may include multiple levels of error levels (or fault levels), such as low-level errors, medium-level errors, and high-level errors, with corresponding progressive reductions in chip security. In other embodiments, the security level may include a security level and an error level, where the security level may be used to indicate that the function to be tested is in a normal state, i.e. the security of the chip is high.

According to the safety level judgment strategy determined in the running state of the vehicle, the diagnosis result obtained by the function test to be tested in the running state is judged, and the safety level of the function state of the function to be tested in the diagnosis result can be determined. For example, in some application scenarios, in response to detecting that the current operation state of the vehicle is a static state and assuming that the function to be tested is a display function of the reverse image, the diagnostic result may be determined according to the security level determination policy corresponding to the reverse image function in the static state in the policy unit 210. In other application scenarios, in response to detecting that the current running state of the vehicle is the running state and assuming that the function to be detected is the display function of the reverse image, the diagnostic result may be determined according to the security level determination policy corresponding to the reverse image function in the running state in the policy unit 210.

Taking the reversing image as an example, because the importance degrees of the functional states of the reversing image are different between the static state and the driving state of the vehicle, and the influence of the functional states is different when a functional error occurs, different safety level judgment strategies aiming at the reversing image function can be set according to the running state of the vehicle, for example, in the static state of the vehicle, the safety level of the reversing image when a certain fault occurs can be a low-level error; in the driving state of the vehicle, the safety level of the reverse image when the same fault occurs can be a high-level error. According to the arrangement, different strategies can be dynamically imported according to the actual conditions of the vehicle, so that dynamic configuration of the strategies can be realized.

As further shown in fig. 2, the policy unit 210 may interact with the control unit 110 for information. Specifically, the control unit 110 may send a diagnosis result of the diagnostic test performed by the diagnostic service unit 120 on the vehicle-mounted chip to the policy unit 210, and the policy unit 210 may import a corresponding security level judgment policy according to a user requirement (for example, a requirement of an automobile manufacturer) or a current operation state of the vehicle, and judge the diagnosis result according to the determined security level judgment policy to obtain a result of the security level. Further, the policy unit 210 may feed back the determined security level result to the control unit 110, so that the control unit 110 can perform a corresponding security operation according to the security level result.

In some embodiments, the control unit 110 may directly send the diagnosis result to the policy unit 210 for determination, or may send the diagnosis result to the policy unit 210 only when there is an abnormality in the function state in the diagnosis result. In other embodiments, the corresponding safety operation performed by the control unit 110 may include at least one of sending an early warning signal, reporting information, sending a control signal for restarting the chip, sending a control signal for controlling the vehicle to stop running, and the like.

For convenience of understanding, still taking the above-mentioned car-backing image function as an example, in a static state of the vehicle, the policy unit 210 determines that the security level to which the car-backing image belongs when the display failure occurs may be a low-level error, and at this time, the control unit 110 may send an early warning signal; in the driving state of the vehicle, the policy unit 210 determines that the security level of the reverse image may be a high-level error when the reverse image has a display failure, and at this time, the control unit 110 may report information or send a control signal for controlling the vehicle to stop driving.

In other embodiments, policy unit 210 may be further configured to: filtering a plurality of same security levels obtained within a first preset time period for the same function to be detected; and/or in response to the fact that a plurality of error grades of the same level aiming at the same function to be tested are obtained within the second preset time length, the level of the error grade of the same level is improved, and information is reported. The first preset duration can be set as required. The second preset duration may be set as desired. The first preset time length and the second preset time length can be the same or different according to needs. The number threshold of a plurality of identical security levels may be set as desired. The threshold number of error levels of a plurality of same levels may also be set as desired.

In some application scenarios, for the same function to be tested, there may be a plurality of results with the same security level obtained in a short time, and the plurality of results with the same security level may be filtered, for example, only one result is retained and fed back to the control unit 110, so that frequent repetitive information interaction may be avoided, and reduction of frequent repetitive security operations of the control unit 110 may also be facilitated.

In other application scenarios, when the policy unit 210 obtains multiple identical error levels (that is, faults of the same level occur) for the same function to be tested in a short time, the identical error levels may be upgraded and reported. For example, when the policy unit 210 obtains a plurality of low-level errors for the same function to be tested in a short time, the plurality of low-level errors may be upgraded to medium-level errors and reported, so that the control unit 110 performs a safety operation corresponding to the medium-level errors. According to the arrangement, the sensitivity of the system to the situation that a plurality of same error levels are obtained in a short time can be effectively improved, and the potential problem which possibly exists in the vehicle-mounted chip and is easy to ignore can be found more accurately.

As described above with reference to fig. 2, for the system including the policy unit 210 according to the embodiment of the disclosure, it can be understood that, compared to a fault ranking policy that is fixedly set in advance, the policy unit 210 according to the embodiment of the disclosure can dynamically configure different judgment policies according to different states of the vehicle, so as to reflect the real influence that the current fault may cause more truly and accurately, and meanwhile, the configurability of the policy unit also facilitates the user to adjust and modify the policy according to the requirement. It will also be appreciated that the above description is exemplary and not limiting, for example, a system according to embodiments of the present disclosure may not be limited to include only the control unit, the diagnostic service unit, and the policy unit in the figures, and other functional units, such as a configuration unit and/or an upper monitoring unit, etc., may also be provided as needed. As will be described in connection with fig. 3.

FIG. 3 shows a schematic block diagram of a system including a configuration unit in accordance with an embodiment of the present disclosure. As shown in fig. 3, the system 300 may include a control unit 110, a diagnostic service unit 120, a policy unit 210, and a configuration unit 310, wherein the configuration unit 310 may be configured to: importing configuration information to the control unit 110, wherein the configuration information may comprise at least one of: an active diagnostic period of the diagnostic service unit 120; an upper time limit for performing a single diagnostic test by the diagnostic service unit 120; and heartbeat signal period.

In some application scenarios, when the control unit 110 is started, the configuration unit 310 may import (or load) configuration information under the control of the control unit 110. In some embodiments, different active diagnostic cycles may be configured for different diagnostic service units 120, respectively. The active diagnostic period may be a time interval for which the control diagnostic service 120 diagnoses periodically.

The upper limit of the execution time is the worst execution time for the diagnostic service unit 120 to execute the diagnostic test case, and exceeding the execution time indicates that the on-board chip may have an abnormal state. The upper execution time limit may be set as desired. For example, in other application scenarios, when the control unit 110 controls a certain diagnostic service unit 120 to perform a diagnostic test on a function to be tested, a diagnostic result is not returned after exceeding an upper limit of the execution time, which indicates that there may be a problem in the diagnostic test process of the diagnostic service unit 120; or the diagnostic result is returned after the execution time upper limit is exceeded, even if the returned diagnostic result is normal, it is difficult to ensure that the diagnostic test process or the functional state of the function to be tested is completely normal. Therefore, the diagnostic test time of the diagnostic service unit 120 can be reasonably limited by setting the upper limit of the execution time so that the system 300 can find a chip problem that may not be easily found.

The heartbeat signal period described above may be a time interval during which a signal indicating that system 300 is functioning properly is periodically transmitted. In some embodiments, the heartbeat signal period may be imported by the configuration unit 310 and triggered by the control unit 110 to generate the heartbeat signal. In other embodiments, the heartbeat signal generated by the control unit 110 may be reported to the upper monitoring unit 320, so that the upper monitoring unit 320 monitors the control unit 110 and the entire system 300. The upper monitoring unit 320 will be described in detail below.

As further shown in fig. 3, the system 300 according to the embodiment of the present disclosure may further include an upper monitoring unit 320, which may be configured to receive the reported information and perform a corresponding control operation on the on-board chip and/or the vehicle according to the security level in the reported information. The upper monitoring unit 320 may directly communicate with the control unit 110 or indirectly communicate with the control unit 110 to receive information reported by the control unit 110, or may receive information reported by other units via the control unit 110.

In some embodiments, the security operations performed by the control unit 110 may include reporting information, that is, reporting information including the diagnosis result and the policy judgment result to the upper monitoring unit 320. The upper monitoring unit 320 may execute a high-level control operation acting on the vehicle itself and/or the vehicle-mounted chip according to the security level of the function to be tested obtained by the policy determination in the reported information, that is, execute a higher-level action than the security operation, for example, when the security level in the reported information is a high-level error, may control the vehicle-mounted chip to restart, and/or control the vehicle to enter a security state (e.g., brake to enter a static state), and the like.

While the system including the configuration unit and/or the upper monitoring unit according to the embodiment of the disclosure is exemplarily described above with reference to fig. 3, it is understood that the above description is illustrative and not restrictive, for example, the upper monitoring unit 320 may not be limited to be included in the system 300 according to the embodiment of the disclosure, and may also be disposed outside the system 300 (for example, the upper monitoring unit 320 may be a vehicle or an existing control device on a vehicle chip), and the communication between the system 300 and the upper monitoring unit 320 is realized through a communication connection between the control unit 110 and the upper monitoring unit 320. It is also understood that the system of the embodiment of the present disclosure may not be limited to only being capable of information interaction with the upper monitoring unit 320, but may also implement information interaction with other external units. This will be exemplarily described below with reference to fig. 4.

Fig. 4 shows a schematic block diagram of a system including a communication unit according to an embodiment of the present disclosure. As shown in fig. 4, the system 400 may include the control unit 110, the diagnosis service unit 120, the policy unit 210, the configuration unit 310, and the communication unit 420, wherein the diagnosis service unit 120, the policy unit 210, and the configuration unit 310 may be set as needed, and have been described in detail in the foregoing with reference to fig. 1 to 3, and will not be described again here. The communication unit 420 may be connected between the control unit 110 and an external unit, and may be configured to transmit information between the control unit 110 and the external unit, wherein the external unit may include, for example, the application unit 410 (shown by a dashed box) and/or the upper monitoring unit 320 (shown by a dashed box) in the illustration.

The communication unit 420 may support various communication functions such as a serial peripheral interface SPI, inter-process communication IPC, and a hypertext transfer protocol HTTP. In some embodiments, for the security and convenience of information, the information may be packaged according to a predetermined data packet format, and the packaged information may be transmitted in the system 400 through the communication unit 420. In other embodiments, the communication unit 420 may include a communication interface to communicatively couple with external units. The external unit may be a functional unit disposed outside the system 400, such as the upper monitoring unit 320, and the functions of the upper monitoring unit 320 are described in the foregoing with reference to fig. 3, and are not described herein again.

The application unit 410 may include a vehicle-mounted application (or vehicle-mounted APP), a smart terminal application (e.g., a mobile phone APP), and/or the like. In some embodiments, the application unit 410 may include, for example, one or more of a back-up video APP, a navigation APP, a vehicle event recorder APP, and the like. In other embodiments, the control unit 110 may be further configured to: register the application unit 410; and controls the diagnosis service unit 120 having the corresponding diagnosis function to perform the diagnosis test according to the diagnosis request of the application unit 410.

The number of the application units 410 may be one or more. In other embodiments, the control unit 110 may be further configured to: registering the application unit 410 in response to receiving an application registration request of the application unit 410; in response to receiving a deregistration request of the registered application unit 410, the application unit 410 is deregistered. According to such an arrangement, dynamic registration of each application unit 410 can be achieved. In other embodiments, the control unit 110 may receive an application registration request or the like of the application unit 410 via the communication unit 420.

In other embodiments, the application unit 410 may actively trigger the diagnostic test service, that is, by sending a diagnostic request to the control unit 110, the control unit 110 controls the diagnostic service unit 120 corresponding to the function to be tested, which requests to perform diagnosis in the diagnostic request, to perform the diagnostic test, and may receive the diagnostic result returned by the diagnostic service unit 120 via the communication unit 420 in time.

In some application scenarios, the control unit 110 may receive an active diagnostic request, which may be from an active diagnostic cycle trigger imported by the configuration unit 310, a diagnostic request from the application unit 410, or a diagnostic request from the upper monitoring unit 320. Here, the active diagnostic request from the application unit 410 and/or the upper monitoring unit 320 may be transmitted to the control unit 110 through the communication unit 420. The control unit 110, upon receiving the active diagnostic request, may parse the active diagnostic request and then initiate the diagnostic service unit 120 having the corresponding diagnostic function to perform the diagnostic test service.

Then, the diagnostic service unit 120 is responsible for executing the diagnostic test case and reporting the diagnostic result obtained by the test to the control unit 110. Further, the control unit 110 may transmit the diagnosis result to the policy unit 210, and then the policy unit 210 may judge the current diagnosis result in combination with the current policy (i.e., the safety level judgment policy determined according to the current operating state of the vehicle) to obtain the current safety level of the function to be measured. The control unit 110 will execute the security operation of the corresponding level in time according to the current security level, especially when determining the error level. According to the arrangement, the system disclosed by the embodiment of the disclosure can realize timely detection and judgment of the function to be detected of the vehicle-mounted chip, and can obtain the safety level which is more consistent with the actual situation according to the vehicle running state which changes in real time so as to execute more accurate safety operation.

In still other embodiments, the control unit 110 may be further configured for at least one of: receiving the functional safety problem reported by the application unit 410 and generated in the operation process; and/or subscribe to the functional state of the function under test that is of interest to the application unit 410, in accordance with a subscription request by the application unit 410.

For example, in some application scenarios, it is assumed that the application unit 410 is a reverse image application, which may report a function safety problem related to a reverse image function. In other application scenarios, it is assumed that the application unit 410 is a navigation application, which may report functional safety issues related to navigation functions. In still other embodiments, when receiving the functional security problem reported by any application unit 410, the control unit 110 may send the functional security problem to the policy unit 210 for performing security level determination, or may send an early warning signal or perform security operations such as information reporting, for example, reporting the functional security problem to the upper control unit 320.

According to the arrangement, the possible problems of the software layer in the vehicle-mounted chip can be found in time, and the function safety state of the vehicle-mounted chip can be monitored more effectively by combining the information reporting function of the software layer. Compared with the traditional automobile monitoring, the intelligent automobile monitoring system is more concerned about hardware faults, and for the intelligent automobile, the software is more and more important, so that the realization of software-level monitoring has important significance.

The subscription request described above may be a customized request for periodic active diagnostics of the function under test of interest of the target on-board chip. In some embodiments, the subscription request may include one or more of subscription information such as a target on-board chip, a function of interest to be tested, and an active diagnostic period. According to the subscription request of the active diagnosis triggered by the application unit 410, the control unit 110 may periodically control the diagnosis service unit 120 to perform the diagnosis test, and may timely feed back the diagnosis result to the application unit 410, so that the application unit 410 may timely obtain the current functional safety state of the target vehicle-mounted chip.

The application unit and the communication unit according to the embodiment of the disclosure are exemplarily described above with reference to fig. 4, and it can be understood that through information interaction between the system 400 and the application unit 410, the system 400 can also implement functions such as information display and information processing in cooperation with software. Further, each application unit 410 can be independently designed, developed, and expanded in the application level according to the actual needs of the user, which is beneficial to further expanding the detection function of the system 400 and improving the expandability of the system in the application level. Further, it is understood that the application unit 410 may not be limited to be disposed outside the system 400, but may be disposed within the system 400 as needed.

Accordingly, the disclosed embodiment also provides a method for monitoring the functions of the vehicle-mounted chip, which will be described in conjunction with fig. 5.

FIG. 5 illustrates a flow chart of a method for monitoring vehicle chip functionality according to an embodiment of the disclosure. As shown in fig. 5, method 500 may include: in step 501, a diagnostic service unit may be registered; and in step 502, according to the type of the function to be tested in the vehicle-mounted chip, controlling the diagnostic service unit with the corresponding diagnostic function to perform a diagnostic test so as to monitor the functional state of the function to be tested.

In some embodiments, the method 500 may further include: determining a safety level judgment strategy corresponding to the function to be tested in the running state according to the running state of the vehicle; judging the diagnostic result of the diagnostic test according to the security level judgment strategy to determine the security level of the functional state of the function to be tested in the diagnostic result; and executing corresponding safety operation according to the safety level.

In other embodiments, the security level may include multiple levels of error levels, and the method 500 may further include: filtering a plurality of same security levels obtained within a first preset time period for the same function to be tested; and/or in response to the error grades of the same level aiming at the same function to be tested being obtained within the second preset time length, the level of the error grade of the same level is promoted and information is reported.

In still other embodiments, the security operations may include issuing warning signals and/or reporting information.

In some embodiments, the method 500 may further include: registering the application unit; and controlling a diagnosis service unit with a corresponding diagnosis function to perform a diagnosis test according to the diagnosis request of the application unit.

In still other embodiments, the method 500 may further include at least one of: receiving functional safety problems generated in the operation process reported by an application unit; and subscribing the function state of the function to be tested, which is interested by the application unit, according to the subscription request of the application unit.

In still other embodiments, the method 500 may further include configuring at least one of the following information: an active diagnostic period of the diagnostic service unit; the diagnosis service unit carries out the upper limit of the execution time of the single diagnosis test; and a heartbeat signal period.

It is understood that the method for monitoring the functions of the on-board chip according to the embodiment of the disclosure has been described in detail in the foregoing with reference to the functions of the units in the system, and therefore will not be described in detail herein. Likewise, some embodiments of the present disclosure also provide an apparatus for monitoring functions of an on-board chip, which may include: a processor; and a memory having stored therein program instructions for monitoring on-board chip functionality that, when executed by the processor, cause the apparatus to implement the method of any of the embodiments described above in connection with fig. 5, corresponding features having been described above in connection with the systems and methods of the disclosed embodiments and will not be repeated here. Further, some embodiments of the present disclosure also provide a computer program product implementing a method for monitoring on-board chip functions, which may contain corresponding features as described above and will not be repeated here.

It is noted that for the sake of brevity, the present disclosure describes some methods and embodiments thereof as a series of acts and combinations thereof, but those skilled in the art will appreciate that the aspects of the present disclosure are not limited by the order of the acts described. Accordingly, it will be appreciated by those skilled in the art in light of the disclosure or teachings of the present disclosure that certain steps therein may be performed in other sequences or concurrently. Further, those skilled in the art will appreciate that the embodiments described in this disclosure are capable of alternative embodiments, in that the acts or modules involved are not necessarily required for the implementation of the solution or solutions of the disclosure. In addition, the present disclosure may focus on the description of some embodiments, depending on the solution. In view of the above, those skilled in the art will understand that portions of the disclosure that are not described in detail in one embodiment may also be referred to in the description of other embodiments.

As will be appreciated by one skilled in the art, embodiments of the present disclosure may be embodied as a system, method or computer program product. Accordingly, the present disclosure may be embodied in the form of: the term "computer readable medium" as used herein refers to any medium that can contain, store, communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Furthermore, in some embodiments, the present disclosure may also be embodied in the form of a computer program product in one or more computer-readable media having computer-readable program code embodied therein.

Any combination of one or more computer-readable media may be employed. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive example) of the computer readable storage medium may include, for example: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.

Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing. Computer program code for carrying out operations for aspects of the present disclosure may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, smalltalk, C + +, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).

Through the detailed description of the scheme for monitoring the functions of the vehicle-mounted chip in the embodiments of the present disclosure in combination with the embodiments, it can be understood that dynamic configuration (or referred to as pluggable configuration) of the diagnostic service units with different diagnostic functions can be implemented through the registrable operation of the diagnostic service units, thereby being beneficial to improving the expandability of the diagnostic function of the system for monitoring the functions of the vehicle-mounted chip, and better conforming to the development trend of modern intelligent automobiles.

In some embodiments, the safety level judgment strategy provided by the strategy unit can better meet the actual influence degree on the safety of the vehicle when the vehicle-mounted chip breaks down through the configurability of the strategy unit to the safety level judgment strategy and the adaptability to different states, and further the vehicle can be controlled to adopt more efficient and accurate safety operation. Further, in other embodiments, through the registrable operation on the application units, the pluggable configuration of different application units can be realized, thereby facilitating the system to realize the functional security detection of the application layer and improving the scalability of the application layer.

While various embodiments of the present disclosure have been shown and described herein, it will be obvious to those skilled in the art that such embodiments are provided by way of example only. Numerous modifications, changes, and substitutions will occur to those skilled in the art without departing from the spirit and scope of the present disclosure. It should be understood that various alternatives to the embodiments of the disclosure described herein may be employed in practicing the disclosure. It is intended that the following claims define the scope of the disclosure and that equivalents or alternatives within the scope of these claims be covered thereby.

Claims

1. A system for monitoring on-board chip functionality, comprising:

a control unit configured to:

registering the diagnosis service unit;

controlling a diagnosis service unit with a corresponding diagnosis function to perform diagnosis test according to the type of the function to be tested in the vehicle-mounted chip so as to monitor the functional state of the function to be tested; and

and the diagnosis service unit is configured to perform diagnosis test on the function to be tested in the vehicle-mounted chip under the control of the control unit and return a diagnosis result.

2. The system as recited in claim 1, further comprising:

a policy unit configured to:

determining a safety level judgment strategy corresponding to the function to be tested in the running state according to the running state of the vehicle;

judging the diagnosis result according to the safety level judgment strategy to determine the safety level of the function state of the function to be detected in the diagnosis result; and

the control unit is further configured to perform a corresponding security operation according to the security level.

3. The system of claim 2, wherein the security level comprises a plurality of levels of error levels, and the policy unit is further configured to:

filtering a plurality of same security levels obtained within a first preset time period for the same function to be tested; and/or

And in response to the fact that the error grades of the same level aiming at the same function to be tested are obtained within a second preset time, the level of the error grade of the same level is improved, and information is reported.

4. The system of claim 2 or 3, wherein the safety operation comprises issuing an early warning signal and/or reporting information;

the system further comprises:

and the upper monitoring unit is configured to receive the reported information and execute corresponding control operation on the vehicle-mounted chip and/or the vehicle according to the security level in the reported information.

5. The system of any of claims 1-4, wherein the control unit is further configured to:

registering the application unit; and

and controlling a diagnosis service unit with a corresponding diagnosis function to perform diagnosis test according to the diagnosis request of the application unit.

6. The system of claim 5, wherein the control unit is further configured for at least one of:

receiving the functional safety problem generated in the running process reported by the application unit;

and subscribing the function state of the function to be tested, which is interested in the application unit, according to the subscription request of the application unit.

7. The system of any of claims 1-6, further comprising:

a configuration unit configured to import configuration information to the control unit, wherein the configuration information comprises at least one of:

an active diagnostic period of the diagnostic service unit;

the upper limit of the execution time of the single diagnosis test of the diagnosis service unit is set; and

the heartbeat signal period.

8. The system of any of claims 4-6, further comprising:

a communication unit connected between the control unit and an external unit and configured to transmit information between the control unit and the external unit, wherein the external unit includes an application unit and/or an upper monitoring unit.

9. A method for monitoring vehicle chip functionality, comprising:

registering the diagnosis service unit; and

and controlling a diagnosis service unit with a corresponding diagnosis function to perform diagnosis test according to the type of the function to be tested in the vehicle-mounted chip so as to monitor the function state of the function to be tested.

10. The method of claim 9, further comprising:

judging the diagnostic result of the diagnostic test according to the safety grade judgment strategy so as to determine the safety grade of the functional state of the function to be tested in the diagnostic result; and

and executing corresponding safety operation according to the safety level.

11. The method of claim 10, the security level comprising a plurality of levels of error levels, the method further comprising:

filtering a plurality of same security levels obtained within a first preset time period for the same function to be detected; and/or

12. The method according to claim 10 or 11, wherein the security operation comprises issuing an early warning signal and/or reporting information.

13. The method according to any one of claims 9-12, further comprising:

registering the application unit; and

14. The method of claim 13, further comprising at least one of:

and subscribing the function state of the function to be tested, which is interested by the application unit, according to the subscription request of the application unit.

15. The method according to any of claims 9-14, further comprising configuring at least one of the following information:

an active diagnostic period of the diagnostic service unit;

the heartbeat signal period.

16. An apparatus for monitoring on-board chip functionality, comprising:

a processor; and

a memory having stored therein program instructions for monitoring on-board chip functions, which when executed by the processor, cause the apparatus to carry out the method according to any one of claims 9-15.

17. A computer-readable storage medium, in which program instructions for monitoring functions of a vehicle chip are stored, which program instructions, when executed by a processor, cause the method according to any one of claims 9-15 to be implemented.